[NeurIPS 2024] Official implementation for "AgentPoison: Red-teaming LLM Agents via Memory or Knowledge Base Backdoor Poisoning"
☆250Oct 23, 2026Updated last week
Alternatives and similar repositories for AgentPoison
Users that are interested in AgentPoison are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- [USENIX Security 2025] PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models☆306Jan 27, 2026Updated 9 months ago
- Code&Data for the paper "Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents" [NeurIPS 2024]☆118Sep 27, 2024Updated 2 years ago
- [NeurIPS'24] RedCode: Risky Code Execution and Generation Benchmark for Code Agents☆92Oct 20, 2026Updated last week
- Agent Security Bench (ASB)☆324Sep 30, 2026Updated last month
- ☆36Feb 27, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆17Jul 2, 2026Updated 3 months ago
- ☆25Jan 6, 2025Updated last year
- [ICLR 2025 Spotlight] The official implementation of our ICLR2025 paper "AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to…☆396Oct 8, 2025Updated last year
- [ICML 2024] Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast☆130Mar 26, 2024Updated 2 years ago
- [EMNLP'24] EHRAgent: Code Empowers Large Language Models for Complex Tabular Reasoning on Electronic Health Records☆144Dec 26, 2024Updated last year
- SEO attack on dense embedding-based retrieval via poisoning☆15Dec 6, 2025Updated 10 months ago
- Source code for the ACL'2025 paper titled "Unveiling privacy risks in llm agent memory"☆37Dec 2, 2025Updated 10 months ago
- Memory Injection Attacks on LLM Agents via Query-Only Interaction☆38Aug 11, 2026Updated 2 months ago
- ☆181Jul 2, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Dynamic Environment to Evaluate Attacks and Defenses for LLM Agents.☆964Jun 2, 2026Updated 4 months ago
- [ICLR 2024] The official implementation of our ICLR2024 paper "AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language M…☆467Jan 22, 2025Updated last year
- ☆11Oct 13, 2025Updated last year
- ICL backdoor attack☆17Nov 4, 2024Updated last year
- [ICLR24] Official Repo of BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models☆57Jul 24, 2024Updated 2 years ago
- [EMNLP 2023] Poisoning Retrieval Corpora by Injecting Adversarial Passages https://arxiv.org/abs/2310.19156☆51Dec 14, 2023Updated 2 years ago
- This repository provides a benchmark for prompt injection attacks and defenses in LLMs☆510Sep 27, 2026Updated last month
- ☆201Oct 31, 2025Updated 11 months ago
- ☆18Nov 19, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Working Memory Attack on LLMs☆18May 27, 2025Updated last year
- [NeurIPS 2025] BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models☆334Sep 8, 2026Updated last month
- [ECCV'24 Oral] The official GitHub page for ''Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking …☆38Oct 23, 2024Updated 2 years ago
- Code to generate NeuralExecs (prompt injection for LLMs)☆27Oct 5, 2025Updated last year
- Comprehensive Assessment of Trustworthiness in Multimodal Foundation Models☆29Mar 15, 2025Updated last year
- ☆49Dec 9, 2025Updated 10 months ago
- ☆34Sep 15, 2024Updated 2 years ago
- 🔥🔥🔥 Detecting hidden backdoors in Large Language Models with only black-box access☆60Jun 2, 2025Updated last year
- ☆43Aug 11, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- BackdoorAgent is a stage-aware framework and benchmark that instruments LLM-agent workflows (planning, memory, tools) to systematically i…☆51Mar 16, 2026Updated 7 months ago
- [ICLR 2025] Official implementation for "SafeWatch: An Efficient Safety-Policy Following Video Guardrail Model with Transparent Explanati…☆45Feb 11, 2025Updated last year
- ☆49May 29, 2026Updated 5 months ago
- ☆99Updated this week
- [USENIX Security '24] An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities agai…☆61Mar 22, 2025Updated last year
- [ICML 2025] UDora: A Unified Red Teaming Framework against LLM Agents☆40Jun 24, 2025Updated last year
- PIForge: An Open Framework for RL-based Prompt Injection Red Teaming.☆37Sep 30, 2026Updated last month